---
id: "CVE-2026-126381"
page: "https://infrastack.ai/live/CVE-2026-126381"
kind: "vulnerability"
aliases: ["CVE-2026-126381"]
title: "n8n: Oracle vector store node lets crafted webhook input read database data"
severity: "medium"
cvss: 6.3
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "n8n", "oracle", "self-hosted", "webhooks"]
not_affected_if: ["no-oracledb-node", "trusted-input-only"]
published_at: "2026-11-13T10:17:40+00:00"
first_seen_at: "2026-11-13T10:47:17+00:00"
updated_at: "2026-11-13T10:55:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126381", "first_seen_at": "2026-11-13T10:47:17+00:00"}]
exploit_sources: []
---

# n8n: Oracle vector store node lets crafted webhook input read database data

Link for people: https://infrastack.ai/live/CVE-2026-126381 (this .md is for agents)

The Vector Store (OracleDB) node in n8n does not validate metadata filter keys used in vector search queries, enabling SQL injection. An attacker who can send crafted input, such as through a webhook feeding a workflow, can read data reachable by the configured Oracle credential.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the n8n version with `n8n --version` and compare against the fixed ranges below.
- Look for workflows that use the Vector Store (OracleDB) node and take input from webhooks or other untrusted sources.

## Fix

- n8n `2.43.5` for the 2.43.x line
- n8n `2.44.1` for the 2.44.x line
- n8n `3.0.1` for the 3.x line

## Timeline

- 2026-11-13T10:47:17+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126381

## Documents

- [advisory] Maintainer's advisory: github.com https://github.com/n8n-io/n8n/security/advisories/GHSA-2x68-96jw-5r6c
- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/n8n-before-2.44.1-sql-injection-via-vector-store-oracledb-metadata-filter-key

## From the sources

n8n before 2.43.5, 2.44.x before 2.44.1, and 3.x before 3.0.1 contains an SQL injection vulnerability in the Vector Store (OracleDB) node, which does not validate Metadata Filter keys used in vector search queries. Attackers can supply crafted filter keys through untrusted workflow input such as webhooks to read data accessible to the configured Oracle credential.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_